Certified Information Systems Security Professional (CISSP®) Preparation Course

Module 2 aims to develop your knowledge and understanding of concepts, principles, structures, and standards related to securing and monitoring business assets to ensure sufficient levels of confidentiality, integrity, and availability in an organization. 

Topics:
– Asset Management
– Data Management
– Information Classification
– Data Security Controls

Module 3 aims to provide you with knowledge and understanding of concepts, principles, structures, and standards required to design and implement secure applications, operating systems, equipment, and networks.

Topics:

– Engineering lifecycle
– Security architectures and models
– Vulnerabilities of architectures, in software and systems
– Vulnerabilities in embedded and mobile devices
– Application and use of cryptography
– Site- and facility design, planning, and operations

Module 4 aims to provide knowledge and understanding of network architectures, communication and transmission methods, protocols, and measures to ensure security (confidentiality, integrity, availability).

Topics:
– Network architecture and design
– Multi-layer and converged protocols
– Security network components
– Secure communication channels
– Network attacks

Module 5 aims to provide you with knowledge and understanding of identification, authentication, authorization, and accounting. It covers methods and techniques relevant to access control.  

Topics:

– Physical & logical access to assets
– Identification & authentication of people
– Identity management
– Authorization mechanisms
– Access control attacks
– Attribute-Based Access Control (ABAC)

Module 6 aims to provide you with knowledge and understanding of investigating vulnerabilities in IT systems and recognizing risk. It covers various test and evaluation methods and techniques.  

Topics:  
– Assessment & test strategies
– Code review and interface testing
– Collection of security process data
– Internal and external audits

Module 7 aims to provide you with knowledge and understanding of security operations and operations security. It covers enforcing and maintaining security measures in daily operations and securing and managing information assets in centralized and distributed environments. 

Topics:

– Concepts and foundation of security operations
– Investigation and evidence collecting
– Incident handling and response
– Reporting and documentation
– Patch and vulnerability management
– Change and configuration management
– Disaster recovery
– Asset management
– Security training and awareness
– Emergency management
– Digital forensics tools, tactics, and procedures

Module 8 aims to provide you with knowledge and understanding of application security. Applications are vulnerable points in organizations and can be deeply targeted. Software should be designed with security in mind. 

Topics:

– Software development security
– Security in the software environment
– Software protection mechanisms
– Effectiveness of software security
– Assessment of software security
– Define and apply secure coding guidelines and standards